. ..
._ | _. .|_ _. _.;_/
[_)|(_]\_|[ )(_](_.| \.net
| ._|
"SineCms Version 2.3.4 - Non-Persistent XSS Vulnerability"
by Nexus
1) Infos
-
Date: 2007-04-26 (ISO 8601)
Product : SineCms
Version : 2.3.4 (la
Coppermine is subjectable to multiple exploits, for the most part
exploiters do not need to have much knowledge of it's working. There is
a script called nst.php which is saved as a rar file and uploaded into
the coppermine (unless coppermine is properly configured to now access
anything bt ima
browser based chat has their entire header
displayed to any currently in a raw telnet session. Below is a a short
article of this big being put into se on a effect hack.
Source: http://www.oh2600.com/forum/viewtopic.php?t=43
By: Nexus
Background:
What is Aimforum.com?
Aimforum.com Is/Was a
- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, July 04, 2003 7:31 PM
Subject: Re: Contact information for Microsoft Security Response Center [tf]
>
> Why do you people insist on using such an unobvious address? Do you have
> a catch-all in place?
B
i = interact( s );
return exit_code;
}
ADDITIONAL INFORMATION
The information has been provided by <mailto:[EMAIL PROTECTED]> Christophe
"korty" Bailleux and <mailto:[EMAIL PROTECTED]> Kostya
Kortchinsky.
====
Using Windows 2000 Pro 5.00.2195 SP1 & latest hotfixes and the demonstration
file supplied by Georgi, this file appears using the icon for an
unregistered file type despite the testhta.txt filename - a big clue - this
was seen in Explorer and IE 5.5. Needless to say, my AV software jumped on
it
